Out-of-bounds

The takdecodeframe function in libavcodec/takdec.c in FFmpeg before 2.1.4 does not properly validate a certain bits-per-sample value, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted TAK aka Tom's lossless...

[Rekall] Memory Forensics Analysis Framework

The Rekall Framework is a completely open collection of tools, implemented in Python under the GNU General Public License, for the extraction of digital artifacts from volatile memory RAM samples. The extraction techniques are performed completely independent of the system being investigated but...

Threat Outbreak Alert: Fake Product Sample Email Messages on January 25, 2014

Medium Alert ID: 32570 First Published: 2014 January 27 14:11 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain product sample photos for the recipient. The text in the email message attempts to convince the recipient to...

Threat Outbreak Alert: Fake Product Sample Attachment Email Messages on December 15, 2013

Medium Alert ID: 32170 First Published: 2013 December 16 14:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product sample attachment for the recipient. The text in the email message attempts to convince the recipie...

Threat Outbreak Alert: Fake Product Sample Request Email Messages on November 19, 2013

Medium Alert ID: 31831 First Published: 2013 November 20 16:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product sample request for the recipient. The text in the email message attempts to convince the recipient ...

Threat Outbreak Alert: Fake Product Sample Request Email Messages on November 7, 2013

Medium Alert ID: 31673 First Published: 2013 November 7 20:10 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product request for the recipient. The text in the email message attempts to persuade the recipient to open...

Threat Outbreak Alert: Fake Product Sample Request Email Messages on November 4, 2013

Medium Alert ID: 31613 First Published: 2013 November 4 20:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product sample request for the recipient. The text in the email message attempts to convince the recipient t...

Threat Outbreak Alert: Fake Product Sample Request Email Messages on October 30, 2013

Medium Alert ID: 31556 First Published: 2013 October 30 18:48 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product sample request for the recipient. The text in the email message attempts to convince the recipient t...

OpenJDK: Specially crafted sample model integer overflow (2D, 8007014)

Unspecified vulnerability in the 2D component in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than...

libtiff 3.9.5 - Integer Overflow

/ Exploit Title: libtiff include include include "tiffio.h" int tiffintegeroverflowtest TIFF tif = TIFFOpen"/home/x90c/samplespp.tif", "r"; int samples = 0; / for instance, TIFFGetField library function will called with malicious samplesperpixel field value TIFFGetField got segfault! /...

Directory traversal

Multiple directory traversal vulnerabilities in Cisco Video Surveillance Manager VSM before 7.0.0 allow remote attackers to read system files via a crafted URL, related to the CiscoVSBWT aka Broadware sample code package, aka Bug ID CSCsv37163...

activemq: DoS by resource consumption via HTTP requests to sample webapp

The default configuration of Apache ActiveMQ before 5.8.0 enables a sample web application, which allows remote attackers to cause a denial of service broker resource consumption via HTTP requests...

Threat Outbreak Alert: Fake Product Sample Request Email Messages on July 5, 2013

Medium Alert ID: 29944 First Published: 2013 July 3 18:35 GMT Last Updated: 2013 July 5 14:41 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product sample request for the recipient. The text in the email message...

Threat Outbreak Alert: Fake Product Sample Order Quotation Email Messages on June 22, 2013

Medium Alert ID: 29753 First Published: 2013 June 24 12:53 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product order quotation for the recipient. The text in the email message attempts to convince the recipient to...

IBM SPSS SamplePower c1sizer ActiveX Control Vulnerability

Added: 06/09/2013 CVE: CVE-2012-5946 BID: 59559 OSVDB: 92845 Background SPSS Statistical Package for the Social Sciences is a computer application that provides statistical analysis of data. It allows for in-depth data access and preparation, analytical reporting, graphics and modelling...

CVE-2012-6551

The default configuration of Apache ActiveMQ before 5.8.0 enables a sample web application, which allows remote attackers to cause a denial of service broker resource consumption via HTTP requests...

OpenJDK: Specially crafted sample model integer overflow (2D, 8007014)

Unspecified vulnerability in the 2D component in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than...

OpenJDK: Specially crafted sample model integer overflow (2D, 8007014)

Unspecified vulnerability in the 2D component in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than...

OpenJDK: Specially crafted sample model integer overflow (2D, 8007014)

Unspecified vulnerability in the 2D component in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than...

CVE-2012-5483

tools/sampledata.sh in OpenStack Keystone 2012.1.3, when access to Amazon Elastic Compute Cloud Amazon EC2 is configured, uses world-readable permissions for /etc/keystone/ec2rc, which allows local users to obtain access to EC2 services by reading administrative access and secret values from this...